First of all, I never studied javascript… now that I think of it I just kinda “know” programing languages (strange but thats not the point).
So I see this script:
[/spoiler ]
And as a logical person I see that it looks like php, a language I happen to know quite well. So I dissect it:
<!-
var thecode = ‘code123’;[/spoiler]
this gives me the thought that it is the password itself but cannot be sure.
<!-
(function(){ $(‘.level-form’).submit(function(e){ e.preventDefault();[/spoiler]
This line, I assume this is meant to detect when I press the “submit” button and trigger the script.
[spoiler]
if ($(‘.level-form #pass’)[0].value == thecode)
This one is quite obvious, if the password I entered is thecode or in other words “code123”
[spoiler]
{ document.location = “?pass=” + thecode; } else { alert(‘Incorrect Password’); } }); }); -!>
If the above is true than I should be forwarded to ?pass=code123 but instead I just get the error alert.
[spoiler]
So I tried making the GET request manually but no luck
https://www.hackthis.co.uk/levels/javascript/3?pass=code123
-!>
What did I do wrong?!?!
